← Back to search

@mcp-browser-kit/server

GitHub Actions Scanned 5d ago

An MCP server that enables AI assistants to interact with your local browsers.

npm
D
40 / 100

Versions

0.26073.30105-experimental.19latest
Jul 30, 2026
10.1.4
Jul 28, 2026
10.1.0
Jul 23, 2026
10.0.0
Jul 20, 2026
0.26071.19201-experimental.92
Jul 19, 2026
+ show 31 moreshow less
9.0.0
Jun 30, 2026
0.26063.30171-experimental.41
Jun 30, 2026
8.3.0
Jun 18, 2026
8.2.0
Jun 14, 2026
0.26061.14173-experimental.27
Jun 14, 2026
8.1.0
Jun 9, 2026
0.26060.99184-experimental.29
Jun 9, 2026
8.0.0
May 24, 2026
0.26052.22141-experimental.58
May 22, 2026
7.0.5
Apr 5, 2026
7.0.0
Mar 23, 2026
0.26032.23195-experimental.18
Mar 23, 2026
0.26032.23185-experimental.28
Mar 23, 2026
0.26032.22172-exp-28
Mar 22, 2026
0.26032.22104-30
Mar 22, 2026
6.0.0
Oct 21, 2025
5.0.2
Jun 7, 2025
5.0.1
May 2, 2025
5.0.0
May 2, 2025
4.0.0
Apr 9, 2025
3.0.1
Apr 4, 2025
3.0.0
Apr 4, 2025
2.0.0
Apr 4, 2025
1.0.9
Apr 3, 2025
1.0.8
Apr 3, 2025
1.0.7
Apr 3, 2025
1.0.6
Apr 3, 2025
1.0.3
Apr 3, 2025
1.0.2
Apr 3, 2025
1.0.1
Apr 3, 2025
1.0.0
Apr 3, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

getContext
annotations: verified low

readOnlyHint true openWorldHint true
getReadableText
annotations: verified low

readOnlyHint true openWorldHint true
getReadableElements
annotations: verified low

readOnlyHint true openWorldHint true
getReadableElementHtml
annotations: verified low

readOnlyHint true openWorldHint true
getSnapshotPage
annotations: verified low

readOnlyHint true openWorldHint true

Permissions 4

network medium
Server uses network capabilities via: fetch(), http
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 50

medium
Suspicious package name: react-dom dependency_analyzer · 60%
medium
Suspicious package name: react-router dependency_analyzer · 60%
info
Tool 'getContext' annotations are consistent annotation_checker · 80%
info
Tool 'getReadableText' annotations are consistent annotation_checker · 80%
info
Tool 'getReadableElements' annotations are consistent annotation_checker · 80%
info
Tool 'getReadableElementHtml' annotations are consistent annotation_checker · 80%
info
Tool 'getSnapshotPage' annotations are consistent annotation_checker · 80%
medium
OAuth implementation without PKCE auth_checker · 75%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Excessive dependency count: 64 direct dependencies dependency_analyzer · 90%
medium
Vulnerable dependency: nanoid@5.1.6 (GHSA-28wg-ghj8-5hjv) dependency_analyzer · 95%
medium
Vulnerable dependency: react-router@8.1.0 (GHSA-qwww-vcr4-c8h2) dependency_analyzer · 95%
medium
Vulnerable dependency: go.opentelemetry.io/otel@1.43.0 (GO-2026-5158) dependency_analyzer · 95%
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@0.17.0 (GHSA-w8rr-5gcm-pp58) dependency_analyzer · 95%
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp@0.17.0 (GO-2026-4985) dependency_analyzer · 95%
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@1.41.0 (GHSA-w8rr-5gcm-pp58) dependency_analyzer · 95%
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp@1.41.0 (GO-2026-4985) dependency_analyzer · 95%
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.41.0 (GHSA-w8rr-5gcm-pp58) dependency_analyzer · 95%
medium
Vulnerable dependency: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp@1.41.0 (GO-2026-4985) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.79.3 (GHSA-hrxh-6v49-42gf) dependency_analyzer · 95%
medium
Vulnerable dependency: google.golang.org/grpc@1.79.3 (GO-2026-6061) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GHSA-5cv4-jp36-h3mw) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-4918) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5025) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5026) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5027) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5028) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5029) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5030) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/net@0.51.0 (GO-2026-5942) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/sys@0.42.0 (GO-2026-5024) dependency_analyzer · 95%
medium
Vulnerable dependency: golang.org/x/text@0.34.0 (GO-2026-5970) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: getContext manifest_parser · 85%
info
Tool: getReadableText manifest_parser · 85%
info
Tool: getReadableElements manifest_parser · 85%
info
Tool: getReadableElementHtml manifest_parser · 85%
info
Tool: getSnapshotPage manifest_parser · 85%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (11) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 80%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 131 components sbom_generator · 100%
critical
AWS Access Key ID found in ndthanhdev-mcp-browser-kit-de1995a/.yarn/releases/yarn-4.17.1.cjs secret_scanner · 95%
high
Generic API Key Assignment found in ndthanhdev-mcp-browser-kit-de1995a/.yarn/releases/yarn-4.17.1.cjs secret_scanner · 75%
high
Hardcoded Password found in ndthanhdev-mcp-browser-kit-de1995a/.yarn/releases/yarn-4.17.1.cjs secret_scanner · 65%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%